I appreciate that BSD has a very powerful network stack, but for this kind of cheaper devices Linux often delivers much faster routing. The APU4 with OpenWRT 935 Mbit/s with NAT and firewall[1]. The EdgeRouter Lite runs at 230 Mbit/s without and 657 Mbit/s with software acceleration[2]. What makes people still decide to use BSD for this category? Stability? Features? Security?
Eh, I like the BSDs too. I just dislike their sometimes lacking hardwaresupport, and the memes around them which aren't true anymore. Besides, maybe you'll move to somewhere else some time? To hyperturboendlessloopsuperfastspamdeliveryland, and then you'll need whatever is appropriate then, to deflect that sh.. before it hits your fan!1!!
The “lol this blogger likes something I don’t” comments get to me after a while. He likes OpenBSD so he evaluated his hardware using it. I doubt he is ignorant of the fact Linux will give him better performance in his scenario.
As for me, if I ever need the performance improvement then I’ll install Linux. Right now I don’t so I’ll use something far more enjoyable for me to use.
Personally I ran on an Edgerouter for many years using the official VyOS/Vyatta fork, and it routes and firewalls close to gigabit with hardware acceleration, and uses less than 8W doing it. That’s 70 kWh / year, or €21/year. Not bad for a €89 device.
I upgraded to an ER4 to gain better VPN performance.
After a few years I upgraded again to a Netgate ARM device, the SG-3100, which on paper should be able to handle close to gigabit performance with suricata enabled. In reality I had frequent restarts due to the watchdog detecting an overloaded aystem.
OpenBSD is top of the line when it comes to security, stability on supported hardware, consistency, and coherence.
The entire distribution is taken care of by a single team. Security is a higher priority than additional features. Documentation mistakes are considered bugs that need to be fixed. Minimal surprises.
I got deep into router implementations like we are talking about years ago, combining ipsec, gre, bgp, and qos, lots of end-points and queues. OpenBSD had more features and less bugs in this space than cisco routers at the time. I was very impressed.
Like so many other things, it may depend on what you're doing and what you are comfortable with.
Only on a 100Mb network and use OpenBSD with an APU4 so it’s more than fast enough for my connection, speed isn’t a problem.
The big advantage I see with OpenBSD is the simplicity.
Everything about it is simple. Where things are installed and how they are configured is far more consistent than Linux. The inbuilt man pages are fantastic compared to other systems. The fact it comes with nothing installed and you need to turn things on makes it easy to manage as you know exactly what is running, in turn this makes keeping up to date easier. Pf is fantastic and again simple.
From not knowing OpenBSD only using Linux before I had a home network with multiple VLANS, cross vlan routing, nat, dns filtering, dns over tls etc in very little time.
I’ll be honest the reason I switched to OpenBSD was mainly to play with something new. I previously had a home router running dd-wrt which was ok but clunky ui, hard to know what was running, upgrading was downloading random untrusted binaries off the internet for specific builds that work on my router. I decided this isn’t great so my options where play and build a OpenBSD router or try something like the EdgeRouter.
I am glad i went with OpenBSD, it doesn’t hide anything from you, you have absolute control and it’s simple to configure with a few static config files. You really understand what is happening.
On top of that, since setting it up, I’ve never touched it. No reboots, no going changing settings, it just works. It’s been set and forget.
11 comments
[ 0.29 ms ] story [ 37.6 ms ] thread[1] https://openwrt.org/toh/pcengines/apu
[2] https://an.undulating.space/post/180927-er_alternate_firmwar...
The memes.
As for me, if I ever need the performance improvement then I’ll install Linux. Right now I don’t so I’ll use something far more enjoyable for me to use.
Personally I ran on an Edgerouter for many years using the official VyOS/Vyatta fork, and it routes and firewalls close to gigabit with hardware acceleration, and uses less than 8W doing it. That’s 70 kWh / year, or €21/year. Not bad for a €89 device.
I upgraded to an ER4 to gain better VPN performance.
After a few years I upgraded again to a Netgate ARM device, the SG-3100, which on paper should be able to handle close to gigabit performance with suricata enabled. In reality I had frequent restarts due to the watchdog detecting an overloaded aystem.
The entire distribution is taken care of by a single team. Security is a higher priority than additional features. Documentation mistakes are considered bugs that need to be fixed. Minimal surprises.
I got deep into router implementations like we are talking about years ago, combining ipsec, gre, bgp, and qos, lots of end-points and queues. OpenBSD had more features and less bugs in this space than cisco routers at the time. I was very impressed.
Like so many other things, it may depend on what you're doing and what you are comfortable with.
The big advantage I see with OpenBSD is the simplicity.
Everything about it is simple. Where things are installed and how they are configured is far more consistent than Linux. The inbuilt man pages are fantastic compared to other systems. The fact it comes with nothing installed and you need to turn things on makes it easy to manage as you know exactly what is running, in turn this makes keeping up to date easier. Pf is fantastic and again simple.
From not knowing OpenBSD only using Linux before I had a home network with multiple VLANS, cross vlan routing, nat, dns filtering, dns over tls etc in very little time.
I’ll be honest the reason I switched to OpenBSD was mainly to play with something new. I previously had a home router running dd-wrt which was ok but clunky ui, hard to know what was running, upgrading was downloading random untrusted binaries off the internet for specific builds that work on my router. I decided this isn’t great so my options where play and build a OpenBSD router or try something like the EdgeRouter.
I am glad i went with OpenBSD, it doesn’t hide anything from you, you have absolute control and it’s simple to configure with a few static config files. You really understand what is happening.
On top of that, since setting it up, I’ve never touched it. No reboots, no going changing settings, it just works. It’s been set and forget.